brakeman-min 5.2.2 → 5.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b7e3bc44c7b0457621cbdd280618d9863d30d98d36a38a8ad4aa1ea9125c5093
-  data.tar.gz: 15209823857b9af3355deb504a9823455ffddc4228ece21f316f262f6f6c698b
+  metadata.gz: e375bc7ee680a934795cdd0919e8aa9f935da41f11c9046396eec3c77dd74bd9
+  data.tar.gz: 8ee57aa0846f0b1b3dc2112ef77775ac0407d5cc3057a275277cd70a04623bd4
 SHA512:
-  metadata.gz: 8dfff2ba034c5ae7e8b038a5d2c1157762bb0d3dc65129974d911d16051aa3b7036255b794db9489bd0452d4989030d7fbf3fda0960e072e3805a82d5cfbbcdb
-  data.tar.gz: 537937fa11680868e1524b60fe5e2421a4e12fbb52f1e222e931922024539b3bc1e49fc499df92d505da181a4f4217141fa3e9cf983c1989c797ce2c08cc37db
+  metadata.gz: 143ddd101703fe515a5a8a504a7a2c584622dbb0204b29b8802ac58b3bb1cf8e204633b6d69fd2519be1e9284f674f77793aa28ac252c86c37de17be547adc03
+  data.tar.gz: bed059cd687896b32a2dd20d991a0351e130c62acf8edcab0a18d0237134aa8319e061445dff6d695baab9ebaec234e89fc39fc9565d4e1414cc7a5852601ed2

data/CHANGES.md

@@ -1,3 +1,8 @@
+# 5.2.3 - 2022-05-01
+
+* Fix error with hash shorthand syntax
+* Match order of interactive options with help message (Rory O'Kane)
+
 # 5.2.2 - 2022-04-06
 
 * Update `ruby_parser` for Ruby 3.1 support (Merek Skubela)

data/lib/brakeman/processors/alias_processor.rb

@@ -703,7 +703,30 @@ class Brakeman::AliasProcessor < Brakeman::SexpProcessor
       end
     end
 
-    exp
+    # Return early unless there might be short-hand syntax,
+    # since handling it is kind of expensive.
+    return exp unless exp.any? { |e| e.nil? }
+
+    # Need to handle short-hand hash syntax
+    new_hash = [:hash]
+    hash_iterate(exp) do |key, value|
+      # e.g. { a: }
+      if value.nil? and symbol? key
+        # Only handling local variables for now, not calls
+        lvar = s(:lvar, key.value)
+        if var_value = env[lvar]
+          new_hash << key << var_value.deep_clone(key.line || 0)
+        else
+          # If the value is unknown, assume it was a call
+          # and set the value to a call
+          new_hash.concat << key << s(:call, nil, key.value).line(key.line || 0)
+        end
+      else
+        new_hash.concat << key << value
+      end
+    end
+
+    Sexp.from_array(new_hash).line(exp.line || 0)
   end
 
   #Merge values into hash when processing

data/lib/brakeman/report/ignore/interactive.rb

@@ -88,10 +88,10 @@ module Brakeman
 
         m.choice "i"
         m.choice "n"
-        m.choice "k"
+        m.choice "s"
         m.choice "u"
         m.choice "a"
-        m.choice "s"
+        m.choice "k"
         m.choice "q"
         m.choice "?" do
           show_help

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "5.2.2"
+  Version = "5.2.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: brakeman-min
 version: !ruby/object:Gem::Version
-  version: 5.2.2
+  version: 5.2.3
 platform: ruby
 authors:
 - Justin Collins
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-06 00:00:00.000000000 Z
+date: 2022-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest